Orbit Downloader File Deletion ActiveX Vulnerability

This host is installed with Orbit Downloader and is prone to File Deletion ActiveX Vulnerability. OpenVAS Vulnerability Test $Id: secpodorbitdownloaderactivexctrlvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Orbit Downloader File Deletion ActiveX Vulnerability Authors: Sujit Ghosal Copyright: Copyrig...

CVE-2009-1064

Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method...

CVE-2009-1064

CVE-2009-1064 targets Orbit Downloader (ActiveX control orbitmxt.dll 2.1.0.2) and affects Orbit Downloader versions 2.8.7 and earlier. The issue is an argument-injection flaw in the download method that allows a remote attacker to overwrite arbitrary files by crafting whitespace, a command-line s...